通过 MinerU 路径遍历图像引用

#!/usr/bin/env bash

Minimal runnable PoC for the /files/mineru/ traversal.

42 = bypass, 0 = blocked, 1 = harness error.

set -Eeuo pipefail REPO="${REPO:-/banana-slides}" APP_PORT="${APP_PORT:-5800}" MOCK_PORT="${MOCK_PORT:-9999}" WORK="${TMPDIR:-/tmp}/banana-49136-poc-$$" LOG="$WORK/app.log" mkdir -p "$WORK/stubs" "$WORK/provider" APP_PID=""; MOCK_PID="" cleanup() { [ -n "$APP_PID" ] && kill "$APP_PID" 2>/dev/null || true; [ -n "$MOCK_PID" ] && kill "$MOCK_PID" 2>/dev/null || true; } trap cleanup EXIT cd "$REPO/backend"

The case image intentionally keeps this PoC offline; these import-only stubs

cover optional packages that app.py imports before the exercised code path.

cat > "$WORK/stubs/dotenv.py" <<'PY' def load_dotenv(*a, **k): return False def find_dotenv(*a, **k): return '' PY cat > "$WORK/stubs/flask_cors.py" <<'PY' class CORS: def __init__(self, app=None, **kw): if app is not None: self.init_app(app) def init_app(self, app, **kw): pass PY cat > "$WORK/stubs/flask_migrate.py" <<'PY' class Migrate: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_sqlalchemy.py" <<'PY' class SQLAlchemy: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_wtf.py" <<'PY' class WTF: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_werkzeug.py" <<'PY' class Werkzeug: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_ssl.py" <<'PY' class SSL: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis.py" <<'PY' class Redis: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_session.py" <<'PY' class Session: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs/flask_redis_session.py" <<'PY' class RedisSession: def __init__(self, *a, **kw): pass def init_app(self, *a, **kw): pass PY cat > "$WORK/stubs